ScreenShot
Created 2021.06.18 10:56 Machine s1_win7_x6402
Filename News.docx
Type Microsoft Word 2007+
AI Score Not founds Behavior Score
1.8
ZERO API file : clean
VT API (file)
md5 aa82c7bfecf2700a60cdb8c4e3642130
sha256 774e85a810dccc424d0befcbee7a189c19b077323e953ed780f651b41a488c7a
ssdeep 192:xmSU9vto5bk8xgNAOP33vS9vbBWfiJqD9kZMW20WdPD:hU9vtv5kbBWfiMKZX2dr
imphash
impfuzzy
  Network IP location

Signature (4cnts)

Level Description
watch Communicates with host for which no DNS query was performed
notice Allocates read-write-execute memory (usually to unpack itself)
notice Creates (office) documents on the filesystem
notice Creates hidden or system file

Rules (0cnts)

Level Name Description Collection

Network (0cnts) ?

Request CC ASN Co IP4 Rule ? ZERO ?

Suricata ids



Similarity measure (PE file only) - Checking for service failure